Technology/Cyber Testing and Monitoring - Senior Risk Analyst

Ally; Charlotte (NC); On-site; USD 85,000 - 150,000; Full time

Job summary

Ally Financial is seeking a Technology Risk and Controls Assurance professional in Charlotte, NC. The role focuses on independent control testing, issue validation, and risk reporting for the Technology Business Line Testing team.

You'll collaborate with Ally Technology, Cyber leadership, and multiple stakeholders to assess risk and drive remediation efforts. Ideal candidates bring 3+ years in audit/assurance with cyber focus, knowledge of FFIEC/NIST controls, and certifications such as

Qualifications

• 3+ years of work experience in audit, assurance, or equivalent line of service; technology/cyber focus strongly preferred
• Bachelor's degree or comparable combination of education and experience
• Working knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53, CRI Profile, etc.)
• Relevant certification (CIA, CISA, CISSP, CRISC, CPA, etc.) is a plus
• Detail-oriented, deadline driven, self-directed and organized individual
• Desire to creatively identify problems that potentially were not known to exist and provide solutions and/or recommendations
• Strong written and verbal communications skills
• Ability to work with structured datasets and dashboard/reporting tools (e.g., Excel-based data models, Power BI, or similar) to interpret testing results and identify control exceptions — direct coding or scripting experience not required
• Proven ability to excel in highly interactive team environment Working knowledge of GRC Platform (e.g., Archer) and Microsoft Office applications

Responsibilities

• Partner with Ally Technology and Cyber Leaders working cross-functionally while conducting individual control tests
• Independently develop, complete, and document tests in accordance with Ally policies and procedures and industry best practices
• Interpret data literacy and analytics outputs — including automated testing results and control monitoring dashboards — to identify anomalies, assess sample adequacy, and provide consultation to management regarding emerging control practices
• Participate in uplift initiatives will be essential to the function's contribution to the enterprise and its continuing role within Ally business
• Proactively identify emerging risks and remain informed of emerging risk trends and industry-leading mitigation practices
• Complete assigned validations of findings and issue management activities with quality and in accordance with Ally standards
• Contribute to control uplift initiatives, special projects, and continuous improvement efforts that strengthen control operations, reduce deficiencies, and support evolving regulatory and cybersecurity expectations.
• Provide coaching, guidance, and support to team members and contractors, as needed.
• Apply current cybersecurity risk assessment practices in control testing, consistent with evolving industry and regulatory baselines

Skills

Audit experience

Cyber/tech focus

Bachelor's degree

GRC frameworks

Certifications

Data analysis

Communication skills

Excel/Power BI literacy

Team collaboration

Education

Bachelor's degree

High school diploma

Tools

Archer

Power BI

Excel

Microsoft Office

Job description

Ally and Your Career

Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?

Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?

Work Schedule:

Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity

This role will be responsible for executing key components of the Technology Risk and Controls Assurance program, including independent control testing, issue validation, and risk reporting for the Technology Business Line Testing team. The role will work closely with multiple stakeholders including Ally Technology and Cyber leadership, IPRM, business leaders, and technology project and operations teams to conduct technology and cybersecurity risk assessments, interpret data and analytics outputs, and lead control remediation and uplift efforts.

The Work Itself

• Partner with Ally Technology and Cyber Leaders working cross-functionally while conducting individual control tests
• Independently develop, complete, and document tests in accordance with Ally policies and procedures and industry best practices
• Interpret data literacy and analytics outputs — including automated testing results and control monitoring dashboards — to identify anomalies, assess sample adequacy, and provide consultation to management regarding emerging control practices
• Participate in uplift initiatives will be essential to the function's contribution to the enterprise and its continuing role within Ally business
• Proactively identify emerging risks and remain informed of emerging risk trends and industry-leading mitigation practices
• Complete assigned validations of findings and issue management activities with quality and in accordance with Ally standards
• Contribute to control uplift initiatives, special projects, and continuous improvement efforts that strengthen control operations, reduce deficiencies, and support evolving regulatory and cybersecurity expectations.
• Provide coaching, guidance, and support to team members and contractors, as needed.
• Apply current cybersecurity risk assessment practices in control testing, consistent with evolving industry and regulatory baselines

The Skills You Bring

• 3+ years of work experience in audit, assurance, or equivalent line of service; technology/cyber focus strongly preferred
• Bachelor's degree or comparable combination of education and experience
• Working knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53, CRI Profile, etc.)
• Relevant certification (CIA, CISA, CISSP, CRISC, CPA, etc.) is a plus
• Detail-oriented, deadline driven, self-directed and organized individual
• Desire to creatively identify problems that potentially were not known to exist and provide solutions and/or recommendations
• Strong written and verbal communications skills
• Ability to work with structured datasets and dashboard/reporting tools (e.g., Excel-based data models, Power BI, or similar) to interpret testing results and identify control exceptions — direct coding or scripting experience not required
• Proven ability to excel in highly interactive team environment Working knowledge of GRC Platform (e.g., Archer) and Microsoft Office applications

Minimum Qualifications

• 3+ years of experience
• High school Diploma or GED equivalent

How We'll Have Your Back

Ally's compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. Our Total Rewards program includes industry-leading compensation and benefits plus additional incentives that are designed to meet your needs and those of your family so you can get the most out of your career and your life, including:

Time Away

Program starts at 20 paid time off days in addition to 11 paid holidays and 8 hours of volunteer time off yearly (time off days are prorated based on start date and program varies based on full or part-time status and management level).

Planning for the Future

plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan pay downs and 529 educational save up assistance programs, tuition reimbursement, employee stock purchase plan, and financial learning center and financial coach access.

Supporting your Health & Well-being

flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short- and long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.

Building a Family

adoption, surrogacy and fertility assistance as well as paid parental and caregiver leave, Dependent Day Care FSA back-up child and adult/elder care days and childcare discounts.

Work-Life Integration

other benefits including Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers program and other employee discount programs.

Other Compensations

depending on the role for which you are considered, you may be eligible for travel allowances, relocation assistance, a signing bonus and/or equity.

To view more detailed information about Ally’s Total Rewards, please visit this link: https://www.ally.com/content/dam/pdf/corporate/ally-total-rewards-snapshot.pdf

Who We Are

Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.

Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.

In accordance with the Americans with Disabilities Act, if after review of the position expectations, you believe that you may need a medical accommodation to fulfill the duties of this role, please email [e-mail] with details of your accommodation request.

Base Pay Range

$85,000.00 - $150,000.00

An individual's position in the range is determined by the specific role, the scope and responsibilities of the role, work experience, education, certification(s), training, and additional qualifications. We review internal pay, the competitive market, and business environment prior to extending an offer.

Incentive Compensation

This position is eligible to participate in our annual incentive plan.